Microsoft 365 Apps For Enterprise vulnerabilities, page 2
931 vulnerabilities
Known vulnerabilities in Microsoft 365 Apps For Enterprise, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-108434microsoft365_apps+9
EPSS score0.51%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108433microsoft365_apps+9EPSS score0.32%
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.CVE-2026-108432microsoft365_apps+9EPSS score0.45%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108431microsoft365_apps+9EPSS score0.45%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108430microsoft365_apps+9EPSS score0.45%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108429microsoft365_apps+5EPSS score0.45%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108428microsoft365_apps+5EPSS score0.45%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108427microsoft365_apps+5EPSS score0.46%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108426microsoft365_apps+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-102850microsoft365_apps+5EPSS score0.63%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-102849microsoft365_apps+5EPSS score0.63%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-97781microsoft365_apps+1EPSS score0.76%
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.CVE-2026-97780microsoft365_apps+10EPSS score0.78%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97779microsoft365_apps+10EPSS score0.83%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.CVE-2026-97778microsoft365_apps+10EPSS score0.59%
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97777microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97776microsoft365_apps+10EPSS score0.78%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97775microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97774microsoft365_apps+1EPSS score0.18%
Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.CVE-2026-97773microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.